Dragon Force 2

DragonForce 2.0 is a ransomware operation first identified in September 2025. The group employs a double extortion model, combining data exfiltration with file encryption to pressure victims into paying ransoms. DragonForce 2.0 primarily targets financial institutions and has been observed using hybrid attack vectors, including physical access and Active Directory compromise.

History

DragonForce 2.0 emerged in September 2025, drawing attention for its unconventional attack methodology. Unlike typical ransomware groups that rely solely on remote access, DragonForce 2.0 has demonstrated capability in gaining physical entry to target premises using insider credentials. The group maintains a dedicated .onion website for victim shaming and ransom negotiations.

Tactics and Techniques

DragonForce 2.0 employs the following tactics:

Active Directory enumeration and privilege escalation
Network-wide ransomware deployment
Data exfiltration prior to encryption
Public victim shaming via leak site

Notable Attacks

In June 2026, DragonForce 2.0 claimed responsibility for an attack on a financial institution involving physical security breach, murder of a security guard, and full network encryption.

References

"DragonForce 2.0 Ransomware: A Growing Cyber Threat" — Medium, 2026. Available at: https://medium.com/@indianthreatint/dragonforce-2-0-ransomware-6a895934dfce

"DragonForce 2.0 Threat Intelligence Update" — X (formerly Twitter), Indian Threat Intelligence, June 2026. Available at: https://x.com/indianthreatint/status/2074196073300828296

This short article about video games can be made longer. You can help Wikipedia by adding to it.